DropBox version 1.4.6 on iOS, 2.0.1 on Android, and Google Drive version 1.0.1 on iOS suffer from a file theft vulnerability due to allowing arbitrary javascript to be executed inside of the privileged file zone.
1100900c25b938d98c9dde4e251799a63bd5241f918b5ca23fa9c84977c34291